07/11/2006 07:28 73454295B9 



MACMILLAN SOBAIMSKI 



PAGE 02/03 



AVAILABLE COP\ 



TTie Office Action mailed April 1 1, 2006, has been carefully reviewed and 
the following remarks are mbmitted in response thereto, Qaims 1-20 are pending. 

The rejection of claims 1, 2, 4, 5, 9-14, and 16-20 under 35 USC 103(a) as 
being unpatentable over ^^ adlow et al in view of Barrett is respectfully traversed. 
Claim 1 recites a particula * network architecture wherein a plurality of security service 
pathways each provide a n ^spective combination of security service features. A 
service selection gateway i iirects us^ traffic to a respective one of the security service 
pathways or to a pass-fhro igh router in response to a subscriber configuration. 
Consequently, a highly efiicimt handling of user traffic is obtained because once 
particular packets are sent to a security service pathway the corresponding 
combination of security fe itures are automatically applied to the packets, unlike the 

iting decisions for each packet to be made at each security 
to the next security element in a combination, 
disclose security service pathways wherein each pathway 
provides a respective combination of security service features. Figure 4 of Wadlow 
shows the various points where different types of packet filtering can be performed. 
Figure 6 shows various points where different types of application filtering can be 
performed. Any particulai traffic is routed among the necessary points depending 
upon the desired security f 3r a user For example, Figure 7 of Wadlow shows a multi- 
element path for providing a directly-routed, packet-filtered path passing through 
points Pcsr-cpn, Pcsr-ctc, ] *clr-ctc, Pclr-psn, Per-psn, and Pcr-in. Figure 8 shows a 
muM-elanent path to provide an application-filtered connection (i.e., a different 
combination of security fe itures), wherein the corresponding packets are still routed to 
packet-filtering points Pes --cpn, Pcsr-ctc, Pclr-ctc, Pclr-psn, Per-psn, and Per-in and 
are additionally routed to c pplication-filtering point Ahag-psn. Therefore, Wadlow 
&ils to teach or suggest th s plurality of security s^ce pathways of the present claims 
which each provide a respi sctivc coonbination of security service features- Upon being 
directed to a pathway by ti le service selection gateway, no further routing between 
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The 

service pathway having th^ 
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routing a packet to the 
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shows that a device throu^ 
different levels of security 
different network architecl ure 
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cited references. 

The rejection 
unpatentable over Wadlo\^ 
ai is respectfully traversed 
and Barrett noted above. 

In view of the 
condition for allowance. 



MACMILLAN SOBANSKI 



PAGE 03/03 



BEST AVAILABLE COPY 



with the present invention since the pathway defmes the 
Wadlow consumes resources to decide whether a packet 
above example should next go to point Ahag-psn or not. 

by the present invention to the correct security 
desired combination of security service features depends 
gateway identifying the appropriate pathway and then 
of that pathway. From then on, the packet 
the selected security features. The architecture in 
in this manner, 
fails to strengthen the rejection. Barrett merely 
which all traffic is passing can be reconfigured to provide 
It provides no motivation or suggestion to reconstruct a 

so that there are a plurality of security service pathways 
combination of security service features and a service 
to a particular pathway based on a subscriber 
claims 1, 2, 4, 5, 9-14, and 16-20 are allowable over the 
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of claims 3, 6-8, and 15 under 35 USC 103(a) as being 

et al in view of Barrett and further in view of Schneider et 
Schneider fails to correct for tiie deficiencies of Wadlow 
therefore^ clahns 3, 6-8, and IS are allowable, 
foregoing amendment and remarks, claims 1-20 are now in 
I avorable action is respectfully solicited. 



Re^>ectfully submitted, 



Dated: July 11, 2006 




Mark L. MoUon 
Attorney for Applicant(s) 
Reg. No. 31,123 
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